conix-security / zer0m0n

zer0m0n driver for cuckoo sandbox
GNU General Public License v3.0
355 stars 142 forks source link

Add checks for ensuring that the image module has been found. #4

Closed Spl3en closed 10 years ago

Spl3en commented 10 years ago

Peb->ImageBaseAddress is not trustable enough for finding the image base address of the current process.

In case of the image module cannot be found, the driver crashes. These commits add additionnals checks for ensuring that the image module has been found.